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CREATE VIEW INPT_FACT AS 

SELECT (CASE WHEN MDJD = user-id THEN PTJD 



(CASE WHEN MDJD = user-id THEN VST 
(CASE WHEN MDJD = user-id THEN P_NM 
AGE SEX 

(CASE WHEN MDJD = user-id THEN MDJD 
DRG, STAY, COST, PYMT 
FROM INPTJ3ASE; 



ELSE NULL END) PTJD, 



ELSE NULL END) VST, 
ELSE NULL END) P_NM, 

ELSE NULL END) MDJD, 



FIG. 3 



S E AVgIsTAY) AVG°STAY*AVG(COST) AVG_COST, AVG(PYMT) AVG_PYMT 

FROM 1NPT_FACT 

GROUP BY MDJD ORDER BY AVG.STAY DESC; 



FIG. 4 
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CREATE VIEW INPT_GRP_BY_MD 

SELECT (CASE WHEN MDJD = user-id THEN MDJD ELSE NULL END) MDJD, 
COUNT(*) VOL, 

AVG(STAY) AVG_STAY, AVG(COST) AVG.COST, AVG(PYMT) AVG_PYMT 
FROM INPT BASE GROUP BY MDJD ORDER BY AVG_STAY DESC; 



FIG. 6 
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Access 
Level 


Role 


Access Policy 


i 


Executive 


Access to al! data. 


II 


Medical Doctor 


Access to doctor's own patient visit data only. 
The patient privacy information of the other patient 
visit data should be blinded. The other medical 
doctor's privacy information should be also blinded. 


III 


Financial Analyst 


Access to financial information without any medical 
doctor's information. 



FIG. 8 
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CREATE OR REPLACE PACKAGE BODY <schema_name>.mSK IS 

FUNCTION P__NM(KEY_PT_ID NUMBER, KEY_VST NUMBER, ORG_P_NM VARCHAR2) 
'RETURN VARCHAR2 v v ' \ 

IS 1 002 1004 

BEGIN 

/* Policy logic to decide whether or not we should mask the P_NM 
/* If we should mask the value, then return masked value. Otherwise, 
1006 /* return the original value. */ 
IF <pollcy_codlt±on> ~-"~1008 
THEN RETURN ORG_P_NM; 

/* Original Value */ 
ELSE RETURN MASKED_P_NM (ORG_P_NM) ; 

j /* Masked value defined by default mask value function */ 
LEND IF; -|010 
END P_NM; 
END MASK; 
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SELECT c.PTJD, 

i-VST, 11 

p.P_NM, ^ 

p. AGE, p.SEX, 

i.MDJD, 

m.D_NM, 

i.DRG. i.STAY, ... 
FROM INPT_FACT i, MD_FACT m, PT_FACT p 
WHERE i.PTJD=p.PTJD AND i.MDJD = m.MDJD AND ■ 



FIG. 11 




SELECT MASK.PT_ID(c.PT_ID, i.VST) PTJD, 

MASK.VST(i.PTJD, i.VST) VST, J-1302 
MASK.PJMM(i.PTJD, i.VST, p.P_NM) P Nf 
MASK.AGE(7.P71/D, /. VST, p.AGE) AGE, 
p.SEX, 

MASK.MDJD(i.MDJD) MDJD, 
MASK.D_NM(i.MD_ID, m.D NM1 D NM, 
i.DRG, i.STAY, ... ~ ' ~ 

FROM INPT_FACT i, MD_FACT m, PT_FACT p 
WHERE i.PTJD=p.PTJD AND i.MDJD = m.MDJD AND 



FIG. 13 
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